quantum privacy amplification for quantum secure direct communication 
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Using quantum mechanics, secure direct communication between distant parties can be performed. 
Over a noisy quantum channel, quantum privacy amplification is a necessary step to ensure the 
security of the message. In this paper, we present a quantum privacy amplification scheme for 
quantum secure direct communication using single photons. The quantum privacy amplification 
procedure contains two control-not gates and a Hadamard gate. After the unitary gate operations, 
a measurement is performed and one photon is retained. The retained photon carries the state 
information of the discarded photon, and hence reduces the information leakage. The procedure 
can be performed recursively so that the information leakage can be reduced to any arbitrarily low 
level. 

PACS numbers: 03.67.Hk, 03.67.Dd, 03.67.-a 
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Quantum secure direct communication (QSDC) allows 
two distant parties to directly communicate securely. It 
has attracted attention recently [ISIllllllllEll- 

In contrast, quantum key distribution usually generates 
a string of random keys 9, 10], and the secret message 
is transmitted later through a classical channel, usually 
using the Vernani one-time-pad cipher-system 11]. Re- 
cently, a QSDC protocol using batch of single photons is 
proposed It has two distinct features. First it uses 
single photons instead of entangled photon pairs. Sec- 
ondly, the transmission is operated in a batch by batch 
manner. This feature is also reflected in the QSDC pro- 
tocols in Refs. The secret message is encoded 
and released to the quantum channel in public only when 
the channel is assured secure so that no secret message 
is leaked even though an malicious eavesdropper may in- 
tercept the encoded qubits. Over a noiseless quantum 
channel, the scheme is completely secure. In practice, 
channel noise is inevitable, error correction and privacy 
amplification must be used in order to reduce the infor- 
mation leakage below the desired level. 

The basic steps in the QSDC protocol in Ref.Q con- 
tains 4 steps. First, Bob prepares a batch of TV sin- 
gle photons randomly in one of four polarization states: 
|0> = \ +z), |1) - l-z), \x) = (|0) + |l))/^/2 and 
\ — x) = (|0) — \l))/^/2. Bob sends this batch of photons 
to Alice. Alice stores most of the single photons and se- 
lects randomly a subset of single photons and performs 
measurement using either the az or basis. Alice pub- 
lishes the measuring-basis and the measured results of 
these single photons. Upon these information, Bob de- 
termines the error rate. If the error rate is higher than 
the threshold, the process is aborted, and if the error 
rate is below the threshold, the process continues and 
Alice encodes her message using two unitary operations 



on the stored single photons and then sends them back to 
Bob. Upon receiving these encoded photons. Bob makes 
appropriate measurement and reads out the message. 

Classical privacy amplification (CPA) [l3| has been 
used for QKD, for instance the BB 84 p rotocol 0- Quan- 
tum privacy amplification (QPA) [ij, |lj| has been used 
for QKD using entangled quantum system, for instance 
for the Ekert91 QKD scheme Without privacy am- 
plification, the error threshold in the proposed QSDC 
scheme in ref.^l will be very small. To allow the 
scheme to be operable over a noisy channel, quantum 
privacy amplification has to be used. In this paper, 
we present a quantum privacy amplification scheme for 
QSDC (QSDC-QPA). This QSDC-QPA can be used not 
only for the QSDC protocol, but also for the BB84 QKD 
protocol. It uses simple local gate operations and sin- 
gle particle measurement, and these operations could be 
implemented by technologies that is currently being de- 
veloped. 

The basic scientific problem for the proposed QSDC- 
QPA scheme can be expressed as follows. Suppose Bob 
sends Alice a batch of single photons, each photon is 
randomly prepared in one of the four quantum states 
|0), |1), (|0) + |l))/2 and (|0) - |l))/2, where |0) and 
|1) denote the horizontal and vertical polarization state 
of a photon. Due to channel noise and eavesdropping, 
an error bit rate r is known for the photon batch (r is 
four times of the error bit rate detected by Alice and Bob 
using random sampling, because eavesdropper's intercep- 
tion causes only 25 percent of error). The QSDC-QPA 
task is to condense a portion of photons from the batch 
so that Eve's information about the condensed photons 
is reduced to below a desired level. 

The basic operation of QSDC-QPA is shown in Fig^ 
for two qubits. It consists of two control not (CNOT) 
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TABLE I: The state of the output qubit when the resuh of the 
second qubit measurement is |0). ^pi and (p2 are the original 
states of the control and target qubit, respectively. 
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TABLE II: he state of the output qubit when the result of the 
second qubit measurement is ipi and ip2 are the original 
states of the control and target qubit, respectively. 
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gates and a Hadamard (H) gate. Using the first qubit as 
control, two CNOT gates are performed on the second 
qubit, or target qubit. Between these two CNOT gates, 
a Hadamard gate is performed on the first qubit. Then 
a measurement in the cr^ basis is performed on the sec- 
ond qubit. Then the first qubit is the condensed qubit. 
We now explain why the above procedure can reduce the 
information leakage. Without loss of the generality, we 
assume the quantum states of single photon 1 and 2 are 
written as 



= ai|0)+6i|l), 
1^)2 = a2|0)+62|l), 



where 
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After the two CNOT gates and H-gate operations, the 
state of the joint system of single photon 1 and 2 is 
changed to 

\i')out = ^{(«ia2 + 6162)10)1 + (0162-^102)11)1} 10)2 

+ -^{(aia2 - 6162) |l)i + (0162 + 6102) |0)i} 11)2 . 

(4) 

After measuring the second qubit in the cr^-basis, no mat- 
ter what the result, the state of the control qubit \ip)\out 
will contain the information of the state of the original 
target qubit (qubit 2). Tables HI and UTI give the output 
state of control qubit after the measurement on the tar- 
get qubit with result and 1 respectively. It depends 
not only on the result of the measurement on the target 
qubit, but also on the original states of the two input 
single photons (photon 1 and 2). Suppose that Eve 
knows the complete information of the first qubit. If 
the second photon is unknown to her, because the single 
photons prepared by Bob is in one of the four states ran- 
domly with 1/4 probability each. Eve's knowledge about 
the output state of the control qubit after the quantum 
privacy amplification operation becomes 




(5) 



That is. Eve has no knowledge at all about the output 
state. But for Bob who has prepared the original states 
of the two qubits, he will know completely the output 
state when Alice tells him the 02,% measurement result. 

If it happens that Eve has complete information about 
both qubits, she will know the output state exactly just 
like Bob. However the probability this can happen is only 
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We can use the output qubit again as a control qubit and 
choose a third qubit from the batch as the target qubit 
and perform QPA operation on them. In this way, as 
more qubits are used in the QPA process. Eve's informa- 
tion is reduced exponentially 



(7) 



where m is the number of qubits that have been used in 
the CPA. In this way, Alice can condense a portion of 
single photons from a batch of N photons with negligi- 
bly small information leakage. Then Alice can perform 
unitary operations to encode her secret message. 

In summary, quantum privacy amplification on a batch 
of polarized single photons can be done with quantum 
mechanics for secure direct communication. 
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